Security Monitoring

The "is_monitoring" entry in the FFIEC IT Examination Handbook defines security monitoring as the ongoing practice of collecting, reviewing, and analyzing system and network activity to detect, investigate, and respond to potential threats. It outlines the required tools, log retention periods, alerting procedures, and reporting obligations for financial institutions.